cameraserver: Remove unnecessary permissions
Remove all permissions not observed during testing.
Bug: 26982110
Change-Id: I88d776d65c1fb32e4146b5fa9cdd86ca0e72360a
diff --git a/sepolicy/cameraserver.te b/sepolicy/cameraserver.te
index 2abdb3e..1c7371d 100644
--- a/sepolicy/cameraserver.te
+++ b/sepolicy/cameraserver.te
@@ -1,16 +1,2 @@
-# Grant access to Qualcomm MSM Interface (QMI) audio sockets to cameraserver
-qmux_socket(cameraserver)
-
-# Permit cameraserver to create sockets with no specific SELinux class.
-# TODO: Investigate the specific type of socket.
-allow cameraserver self:socket create_socket_perms;
-
-allow cameraserver mpdecision_socket:dir r_dir_perms;
-unix_socket_send(cameraserver, mpdecision, mpdecision)
-
-binder_call(cameraserver, rild)
-
unix_socket_send(cameraserver, camera, camera)
-unix_socket_connect(cameraserver, adspd, adspd)
-allow cameraserver audio_cutback_data_file:dir search;
-allow cameraserver audio_cutback_data_file:sock_file write;
+unix_socket_send(cameraserver, mpdecision, mpdecision)
diff --git a/sepolicy/mpdecision.te b/sepolicy/mpdecision.te
index e06b459..f1b0fc9 100644
--- a/sepolicy/mpdecision.te
+++ b/sepolicy/mpdecision.te
@@ -34,4 +34,7 @@
r_dir_file(mpdecision, mediaserver)
r_dir_file(mpdecision, audioserver)
+allow mpdecision cameraserver:dir search;
+allow mpdecision cameraserver:file { read open };
+
allow mpdecision self:capability sys_nice;
